HP VPN Firewall Appliances System Management and Maintenance Configuration Guide

155
Ste
p
Command Remarks
5. Create or update a
MIB view.
snmp-agent mib-view { excluded |
included } view-name oid-tree
[ mask mask-value ]
Optional.
By default, the MIB view ViewDefault is
predefined and its OID is 1.
Each view-name oid-tree pair represents a
view record. If you specify the same record
with different MIB subtree masks multiple
times, the last configuration takes effect.
Except for the four subtrees in the default
MIB view, you can create up to 16 unique
MIB view records.
6. Configure the SNMP
access right.
• (Method 1.) Create an SNMP
community:
snmp-agent community { read |
write } [ cipher ]
community-name [ mib-view
view-name ] [ acl acl-number |
acl ipv6 ipv6-acl-number ] *
• (Method 2.) Create an SNMP
group, and add a user to the
SNMP group:
a. snmp-agent group { v1 |
v2c } group-name
[ read-view read-view ]
[ write-view write-view ]
[ notify-view notify-view ]
[ acl acl-number | acl ipv6
ipv6-acl-number ] *
b. snmp-agent usm-user { v1
| v2c } user-name
group-name [ acl
acl-number | acl ipv6
ipv6-acl-number ] *
Use either method.
By default, no SNMP group exists.
The username configured by using method
1 is the same as that configured by using
method 2. Usernames created by either
method must be the same as the community
name configured on the NMS.
7. Configure the
maximum size (in
bytes) of SNMP
packets for the
SNMP agent.
snmp-agent packet max-size
byte-count
Optional.
Configuring SNMP logging
Disable SNMP logging in normal cases to prevent a large amount of SNMP logs from decreasing device
performance.
The SNMP logging function logs Get requests, Set requests, and Set responses, but does not log Get
responses.
• Get operation—The agent logs the IP address of the NMS, name of the accessed node, and node
OID.
• Set operation—The agent logs the NMS' IP address, name of accessed node, node OID, variable
value, and error code and index for the Set operation.